3rd, a controller or processor not founded in the EU is going to be subject matter towards the GDPR if it processes the non-public details of data subjects in the EU Which processing is connected to the “monitoring” during the EU of the “behavior” of knowledge topics as their actions https://bookmarklogin.com/story17771043/cyber-security-services-in-usa